This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa File: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (raw, json) Hash identifier: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k= Subject key identifier: BB:78:59:E1:6A:3E:54:5F:90:E6:84:A5:16:46:94:96:44:2F:10:A0 Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Certificate serial: 019B7DC9DB7EEFAD73D49832E3BB94872C72 Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa Signing time: Fri 02 Jan 2026 08:18:59 +0000 ROA not before: Fri 02 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209943 IP address blocks: 194.56.221.0/24 maxlen: 32 2001:67c:28ec::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:db:7e:ef:ad:73:d4:98:32:e3:bb:94:87:2c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f Validity Not Before: Jan 2 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb7859e16a3e545f90e684a516469496442f10a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b4:fc:45:be:26:76:d4:1b:12:92:4b:b3:ce: 34:d4:64:a6:06:2b:c2:d8:a9:09:38:ff:1b:59:30: 4f:f5:83:ec:0f:b3:9f:02:5f:2f:13:04:be:ff:72: 8a:b3:75:c1:44:6c:16:c4:ee:78:05:e0:2d:8f:1a: 9f:cc:c1:a3:c5:b2:23:75:3e:59:82:a9:ef:a9:bb: ef:65:5e:cd:b6:0a:b1:9d:9a:2c:c0:e1:94:40:dd: a1:54:a3:98:db:36:a2:a1:fa:84:8a:a5:d9:4f:d2: e9:54:68:92:92:48:f5:7c:ba:d5:1a:2f:d5:a4:06: 71:1f:81:fa:45:3f:73:75:0f:0e:e2:7d:fc:e3:18: e7:16:ae:4f:dd:49:df:79:60:f8:23:92:b2:96:2e: 31:26:07:f4:7d:2a:8a:8c:0b:9a:f8:7e:d2:db:6b: cd:3b:f7:c3:4a:bc:bf:2a:b9:ba:22:01:1e:ad:8d: 9e:ca:24:76:81:12:e8:b3:54:f3:be:98:09:b6:a7: 78:6b:26:aa:ab:95:3f:af:c3:13:22:33:d5:56:23: d5:f4:a6:01:de:91:f3:34:f6:08:c0:a2:7c:ea:f7: 80:9b:3f:e3:bc:c2:82:d1:64:8d:94:f5:bc:e7:74: 1e:90:9c:47:0d:ea:72:7d:cd:25:79:42:ee:b9:c1: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:78:59:E1:6A:3E:54:5F:90:E6:84:A5:16:46:94:96:44:2F:10:A0 X509v3 Authority Key Identifier: keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.56.221.0/24 IPv6: 2001:67c:28ec::/48 Signature Algorithm: sha256WithRSAEncryption 6d:92:16:7d:c0:da:30:17:08:3c:97:c3:83:85:7d:e3:9b:37: 8f:fa:fa:e4:bb:a2:68:f3:3a:e3:ff:ac:c7:47:8e:f6:cf:55: 48:73:7e:d6:65:cc:50:5e:b8:a6:e5:47:82:89:4d:b9:81:72: 8c:c1:71:a4:71:ea:65:1c:61:fc:c1:cd:af:f6:74:ef:ea:d7: 76:ce:c6:06:a9:c3:64:c0:c7:38:90:a0:10:12:69:71:35:3b: 61:c5:9b:ad:f3:b5:b5:f9:3e:cc:03:39:16:39:7e:59:95:50: 69:8b:0a:a0:83:bb:8b:89:64:da:6a:7e:e9:91:ca:03:ea:dc: 04:ea:20:04:38:c2:5c:54:1d:15:18:28:b8:40:59:a4:bf:a6: 8c:d6:62:1e:84:2a:ed:f0:a2:88:da:e2:19:08:14:07:fd:9a: 6a:6e:40:4b:c2:7e:10:53:06:63:0d:bf:fa:14:d5:2b:d5:8f: 7e:fe:de:4d:a9:8b:75:18:cc:39:e0:5c:0d:e5:75:b8:53:5a: 19:ba:dc:67:26:a4:e7:d8:0f:59:6e:db:67:1d:ea:7c:e8:c5: b4:af:f9:8e:6b:c2:b1:77:68:af:31:96:1b:fc:bb:44:ae:cd: 40:7d:c0:be:bb:52:ba:73:f3:0d:4a:fa:f2:e8:74:86:29:ee: d2:32:46:a1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9ydt+761z1Jgy47uUhyxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy YzczMmYwHhcNMjYwMTAyMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjc4NTllMTZhM2U1NDVmOTBlNjg0YTUxNjQ2OTQ5NjQ0MmYxMGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbT8Rb4mdtQbEpJLs8401GSmBivC 2KkJOP8bWTBP9YPsD7OfAl8vEwS+/3KKs3XBRGwWxO54BeAtjxqfzMGjxbIjdT5Z gqnvqbvvZV7NtgqxnZoswOGUQN2hVKOY2zaiofqEiqXZT9LpVGiSkkj1fLrVGi/V pAZxH4H6RT9zdQ8O4n384xjnFq5P3UnfeWD4I5Kyli4xJgf0fSqKjAua+H7S22vN O/fDSry/Krm6IgEerY2eyiR2gRLos1TzvpgJtqd4ayaqq5U/r8MTIjPVViPV9KYB 3pHzNPYIwKJ86veAmz/jvMKC0WSNlPW853QekJxHDepyfc0leULuucE+PQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLt4WeFqPlRfkOaEpRZGlJZELxCgMB8GA1UdIwQY MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt ZGNkYzVjZWUyNzZmLzEvdTNoWjRXby1WRi1RNW9TbEZrYVVsa1F2RUtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwjjdMA8E AgACMAkDBwAgAQZ8KOwwDQYJKoZIhvcNAQELBQADggEBAG2SFn3A2jAXCDyXw4OF feObN4/6+uS7omjzOuP/rMdHjvbPVUhzftZlzFBeuKblR4KJTbmBcozBcaRx6mUc YfzBza/2dO/q13bOxgapw2TAxziQoBASaXE1O2HFm63ztbX5PswDORY5flmVUGmL CqCDu4uJZNpqfumRygPq3ATqIAQ4wlxUHRUYKLhAWaS/pozWYh6EKu3wooja4hkI FAf9mmpuQEvCfhBTBmMNv/oU1SvVj37+3k2pi3UYzDngXA3ldbhTWhm63GcmpOfY D1lu22cd6nzoxbSv+Y5rwrF3aK8xlhv8u0SuzUB9wL67Urpz8w1K+vLodIYp7tIy RqE= -----END CERTIFICATE-----Generated at Mon Jan 26 13:00:36 2026 by rpki-client